Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 8 replies
  • Answers 1 answer
  • Subscribers 38 subscribers
  • Views 1533 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos XG 330 HA A-P "Validation failed for HA interface IP" error

PetrMinarik

Hi all,

i have 2 Sophos XG 330 whit SFOS 18.0.4 MR-4 firmware.

I configured high availability in active-pasive mode, whit the same key in the 2 firewalls. I configure the second firewall in auxiliary and connects all cables to firewalls.

Primary box: i have configured QuickHA A-P (Primary, QuickHA, passphrase and dedicated port Port4, allowed ssh for DMZ zone); everything is OK except "System services" section - it is frozen (i can click on nothing).

Auxiliary box: new box with factory default config; i have erased both wireless networks (GuestAP, Sophos), disabled both dhcp servers, allowed ssh for DMZ zone, changed default password and configured QuickHA A-P (Auxiliary, QuickHA, passphrase and dedicated port Port4).

From the primary box i can ssh connect to auxiliary box:

Applog.log on primary box shows:

Can you help me please with this problem?

Thank you

Petr Minarik



This thread was automatically locked due to age.
Parents
  • FormerMember
    0 FormerMember

    Hi ,

    Thank you for reaching out to the Community.

    Thank you for providing the screenshot; it seems you’re missing the Dedicated HA Link. 

    Check out the following document for reference: Configure active-passive HA using QuickHA.

    Thanks,

  • 0 in reply to FormerMember

    Hi Harsh Patel,

    i am very sorry for delay but i was unable to login.

    Thank you for your answer.

    I am 100% sure, i have inserted "Dedicated HA link" on primary box. I thing it is impossible to activate HA without "Dedicated HA link".

    Now, this section "System services" is still frozen (like on the first printscreen) and i can click on notning. Whole section "Hign availability" +  "Traffic shaping setting" + "RED" + ... is frozen.

    Now i am not able to change configuration of HA. I can neither activate nor deactivate HA.

    I wiil send printscreen of interfaces on primary box. The Port4 was configured by HA automatically.

    Thank you

    Petr Minarik

  • 0 in reply to PetrMinarik

    And System services on auxiliary box:

  • 0 in reply to PetrMinarik

    Hallo Harsh Patel, 

    hello PetrMinarik,

    we have the same issue, that system services freeze. We already opened a ticket at sophos support, but no reply.

    We wanna connect two XG330 via HAQuickconnect, but it is not working. And if we open the system services webpage it is freezing like in your first screenshot.

    Do you have any update on your problem or solution ideas?

    Stay safe & thanks

    Daniel

  • 0 in reply to Daniel Loose

    Hello Daniel,

    unfortunately i have no update or solution. I am still in the same situation - section "System services" is still frozen (spinning wheel only) and i configured HA by Sophos guide.

    Can you track this case? Or do you want to send some notice in case of any improvement?

    And opposite, can i track your case?

    Best regards

    Petr

  • FormerMember
    0 FormerMember in reply to PetrMinarik

    Hi and ,

    The support team is aware of this issue and tracking it with the internal ID NC-66978. The fix for this issue is tentatively planned to be included in the v18 MR5 release. 

    However, if you don't want to wait for the firmware release, open a support case at support.sophos.com and mention the internal ID to get the patch applied to your firewall. Please PM me the support case number so that I can help with the follow-up. 

    Thanks,

Reply
  • FormerMember
    0 FormerMember in reply to PetrMinarik

    Hi and ,

    The support team is aware of this issue and tracking it with the internal ID NC-66978. The fix for this issue is tentatively planned to be included in the v18 MR5 release. 

    However, if you don't want to wait for the firmware release, open a support case at support.sophos.com and mention the internal ID to get the patch applied to your firewall. Please PM me the support case number so that I can help with the follow-up. 

    Thanks,

Children
Unfiltered HTML